01 Introduction
This Privacy Policy applies to all personal information processed by mbi88 in connection with the website accessible at mbi88.cam and all associated services including sports betting, live casino, slots, poker, bingo, lottery, account management, payment processing, bonus administration, and customer support.
mbi88 is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection principles. This policy explains the types of information collected, the purposes for which it is processed, and the rights available to each user.
By registering for an account, depositing funds, placing a wager, claiming a promotion, or using any part of the mbi88 platform, you acknowledge that you have read and understood this Privacy Policy.
02 Definitions
In this Privacy Policy, the following terms carry the meanings set out below.
- "Personal data" means any information that identifies or can reasonably identify a living individual, including name, identity number, date of birth, contact details, financial account references, IP address, and device identifiers.
- "Processing" means any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
- "Platform" means the mbi88 website, associated mobile interfaces, customer support systems, and any related digital services.
- "Player", "you", "your" refers to any individual who registers for or uses an mbi88 account.
- "Service providers" means third-party entities engaged by mbi88 to assist in delivering platform functionality, including payment processors, identity verification services, and customer support systems.
- "MYR" and "RM" refer to Malaysian Ringgit, the currency used for deposits, withdrawals, and account balances on the platform.
03 Data We Collect
mbi88 collects personal data through several channels depending on how a player interacts with the platform.
Registration and account information includes your full legal name, date of birth, username, password hash, email address, mobile telephone number, and a residential or correspondence address. This data is required to create and maintain an account.
Identity and verification documents may be requested where mbi88 is required to confirm your identity, age, or proof of address. This may include a scan or photograph of a government-issued identity card (such as a Malaysian NRIC), passport, utility bill, or bank statement.
Financial and payment data includes deposit and withdrawal records, payment method references (such as FPX transaction identifiers, e-wallet account names, DuitNow reference numbers, and bank account name fragments), and cryptocurrency wallet addresses submitted during a transaction. Full card numbers or complete banking credentials are not stored by mbi88.
Platform activity data includes wager history, game session data, bonus claims, promotion eligibility records, account preferences, login timestamps, and customer support interactions.
Technical and device data includes IP addresses, browser type, operating system, device model, screen resolution, session duration, referring URLs, and similar information generated automatically when you access the platform.
| Data Category |
Examples |
Collected When |
| Identity |
Name, NRIC, date of birth |
Registration, KYC review |
| Contact |
Email, mobile number, address |
Registration, support |
| Financial |
Deposit records, e-wallet references, DuitNow, FPX details |
Deposits, withdrawals |
| Activity |
Wager history, game sessions, bonus records |
Ongoing platform use |
| Technical |
IP address, browser, device ID |
Every site visit |
04 Legal Basis for Processing
mbi88 processes personal data only where a recognised legal basis applies. The applicable basis may vary depending on the specific processing activity.
- Contractual necessity: Processing required to register your account, accept and settle wagers, process MYR deposits and withdrawals, administer promotions, and provide customer support.
- Legal obligation: Processing required to fulfil identity verification, age verification, fraud investigation, and records retention obligations.
- Legitimate interests: Processing carried out to detect and prevent security incidents, account fraud, bonus abuse, collusion, and platform manipulation, where such processing is proportionate and does not override player rights.
- Consent: Where mbi88 requests consent for a specific processing activity — such as optional marketing communications — consent may be withdrawn at any time without affecting any prior lawful processing.
05 How We Use Your Data
Personal data collected by mbi88 is used for the following purposes:
- Creating, managing, and verifying your mbi88 account;
- Confirming your age (21 or above) and eligibility to use gambling services;
- Processing MYR deposits and withdrawals through supported methods including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, and approved cryptocurrency networks;
- Settling sports bets, live dealer results, slot sessions, and other wagers;
- Administering promotions including welcome bonuses, birthday rewards, cashback, and referral benefits;
- Responding to account enquiries, support requests, complaints, and responsible gambling requests;
- Detecting, investigating, and preventing fraud, identity misuse, money laundering, bonus abuse, and prohibited conduct;
- Maintaining responsible gambling controls including deposit limits, cooling-off periods, and self-exclusion records;
- Complying with account verification requirements, security protocols, and legal obligations;
- Analysing platform performance and usage patterns to improve service quality; and
- Communicating material updates to account terms, policies, or platform features.
mbi88 does not use personal data to create profiles for sale, share data with unrelated advertisers, or send unsolicited commercial communications without a clear prior basis.
06 Data Sharing and Disclosure
mbi88 may share personal data with the following categories of recipients where necessary and proportionate:
- Payment and banking partners: Transaction data is shared with payment processors, banks, and e-wallet networks such as DuitNow, FPX, and Boost to execute and verify fund transfers.
- Identity and age verification services: Document data may be submitted to third-party verification providers to confirm NRIC or passport details.
- Game and platform providers: Technical session data may be passed to licensed game studios and sports data providers to deliver and settle game content.
- Customer support systems: Communication records may be held in third-party help-desk tools where appropriate data agreements are in place.
- Fraud and security services: IP addresses, device fingerprints, and behavioural data may be processed by fraud detection systems.
- Legal and regulatory authorities: mbi88 may disclose information where required by a valid legal request, court order, or regulatory requirement.
Service providers operating under contract with mbi88 are required to process personal data only for the purposes specified and to apply adequate security measures. mbi88 does not sell personal data.
07 Cookies and Tracking Technologies
mbi88 uses cookies and similar technologies to maintain session continuity, recognise returning visitors, prevent fraudulent access, and analyse platform usage. Cookies may be session-based (deleted when you close the browser) or persistent (retained for a defined period).
Technical or strictly necessary cookies are required for the platform to function correctly. These cannot be disabled without impairing service. Other cookies, such as those used for analytical purposes, may be controlled through browser settings.
Third-party scripts are not embedded for advertising or cross-site tracking purposes. Players who clear cookies may be required to re-authenticate on their next visit.
08 Data Retention
mbi88 retains personal data for as long as reasonably necessary for the purposes outlined in this policy. Retention periods are influenced by the nature of the data, the purpose for which it was collected, applicable legal obligations, and potential dispute resolution needs.
- Account and identity verification records may be retained for a minimum period after account closure to satisfy legal and compliance obligations.
- Financial transaction records may be retained as required for accounting, audit, and fraud investigation purposes.
- Self-exclusion records may be retained beyond account closure to support responsible gambling controls and prevent account reinstatement during an active restriction.
- Customer support correspondence may be retained as necessary to respond to ongoing or future enquiries.
When data is no longer required, mbi88 will take reasonable steps to delete or de-identify it in a secure manner.
09 Security Measures
mbi88 applies technical and organisational measures intended to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These include encrypted transmission of data over HTTPS, access controls limiting data access to authorised personnel, and regular review of security practices.
Players are responsible for protecting their own account credentials, including passwords, one-time codes, and device access. mbi88 will not request your password through unsolicited communications. If you believe your account has been accessed without authorisation, contact customer support without delay.
Security notice: No online system can guarantee absolute security. mbi88 will take reasonable steps to investigate and respond to any confirmed personal data breach affecting players.
10 Your Rights
Players may exercise the following rights with respect to their personal data held by mbi88, subject to applicable legal limitations:
- Right of access: You may request a summary of the personal data mbi88 holds about you and the purposes for which it is processed.
- Right to correction: You may request that inaccurate or incomplete information be corrected or updated. Some details can be amended directly within your account settings.
- Right to erasure: You may request deletion of your personal data where it is no longer required for the purposes for which it was collected, subject to legal or contractual obligations that require its retention.
- Right to restriction: You may request that processing of your data be temporarily limited while a correction or objection request is being reviewed.
- Right to object: You may object to processing based on legitimate interests, including certain automated profiling activities.
- Right to withdraw consent: Where mbi88 relies on your consent for a specific processing activity, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.
To exercise any of the above rights, contact mbi88 customer support with your account details and a clear description of your request. mbi88 will respond within a reasonable period and may need to verify your identity before acting on a request.
11 Children and Underage Users
mbi88 services are strictly limited to persons aged 21 years or above. The platform does not knowingly collect personal data from individuals under this age. If mbi88 identifies that a minor has submitted personal information or attempted to register an account, the account will be suspended pending review, any associated data may be deleted, and the matter will be handled in accordance with the applicable age verification and responsible gambling obligations.
Parents and guardians who believe a minor has accessed mbi88 should contact support so the account can be reviewed and appropriate steps taken without delay.
12 Cross-Border Data Transfers
Some personal data processed by mbi88 may be transferred to, stored in, or accessed by systems located outside Malaysia. Where such transfers occur, mbi88 takes steps to ensure that adequate protections are in place, including contractual safeguards with the receiving entity.
Payment data processed through Malaysian banking networks such as FPX and DuitNow is handled in accordance with the security and compliance standards required by the relevant payment infrastructure.
13 Changes to This Privacy Policy
mbi88 may update this Privacy Policy periodically to reflect changes in platform services, legal requirements, or data processing practices. When a material change is made, the effective date shown at the top of this page will be revised.
Players are encouraged to review this page regularly. Continued use of mbi88 following a policy update constitutes acceptance of the revised terms. Where a change significantly affects player rights, mbi88 will take reasonable steps to bring the update to players' attention.
14 Contact Us
If you have a question, concern, or request relating to this Privacy Policy or the handling of your personal data by mbi88, please contact the customer support team. Support is available 24 hours a day, 7 days a week.
Customer support email displayed as plain text — not a clickable link:
[email protected]
When contacting support about a data matter, please include your registered account username or email address, a description of your request, and any relevant reference numbers. Do not include passwords or sensitive security codes in your message.